Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'FlashUpdate' = '"%APPDATA%\AdobeFlash\setup.exe"'
- Средство контроля пользовательских учетных записей (UAC)
- '%APPDATA%\AdobeFlash\setup.exe'
- '%TEMP%\RarSFX0\setup.exe'
- chrome.exe
- %TEMP%\king.txt
- %APPDATA%\AdobeFlash\MZђ
- %APPDATA%\AdobeFlash\update.xml
- %APPDATA%\AdobeFlash\setup.exe
- %TEMP%\RarSFX0\setup.exe
- %TEMP%\RarSFX0\setup.ahk
- %APPDATA%\AdobeFlash\setup.ahk
- %TEMP%\king.txt
- %TEMP%\RarSFX0\setup.exe
- %TEMP%\RarSFX0\setup.ahk
- 'wg###ava.com':80
- 'so###lmsn.com':80
- wg###ava.com/MZ?
- wg###ava.com/king.txt
- so###lmsn.com/king.txt
- DNS ASK wg###ava.com
- DNS ASK so###lmsn.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'